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1 Introduction 



The 3Com® Wireless LAN Access Points 8200, 8500, and 8700 offer a 
dual-mode architecture that supports both 802. 1 1 a and 802. 1 1 b wireless users 
on a single device. This means you can mix and match radio bands to meet 
different coverage and bandwidth needs within the same area. Different access 
point models give you the flexibility to choose to support both radio modes 
immediately or choose one radio mode now and upgrade to newer standards 
later as they become available with an easy-to-install optional Mini PCI 
upgrade kit. 

With their flexibility and unfettered access, wireless LANs are changing the way 
people work. Now with 3Com's enterprise-class wireless access points, you can 
build a cost effective, reliable, secure wireless network that provides users with 
seamless connectivity to the Internet, company intranet, and the wired corporate 
network from anywhere they happen to be — conference room, cafeteria or 
office. 

3Com's dual-mode design supports both 802.1 1a and 802.1 1b wireless 
standards on a single access point. This capability increases configuration and 
coverage flexibility and protects your network investment for both existing and 
emerging wireless standards. 

Industry-leading security features and comprehensive management and 
performance features combine to make these enterprise class wireless access 
points an ideal choice for organizations ready to serve their increasingly mobile 
workforce. 



Product Features 

■ Access Point 8200 — Creates an enterprise-class wireless LAN supporting up 
to 250 simultaneous users. The single wireless interface 802.1 1b 2.4 GHz, 
1 1-Mbps access point upgrades to 802.1 1 b-802.1 1a dual mode with optional 
upgrade kit. 
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■ Access Point 8500 — Creates a high-performance enterprise-class wireless 
LAN supporting up to 250 simultaneous users. The single wireless interface 
802.11a 5 GHz, 54-Mbps access point upgrades to 802.1 1 b-802.1 1a dual 
mode with optional upgrade kit. 

■ Access Point 8700 — Creates a high-performance enterprise-class dual-mode 
802.1 1a and 802.1 1b wireless LAN supporting up to 250 simultaneous users 
up to 100 meters (328 feet). 

Security 

3Com offers one of the most robust suite of standards-based security on the 
market today. To protect sensitive data broadcast over the wireless LAN, 3Com 
supports Wireless Equivalent Privacy (WEP) RC4 40/ 64-bit, 1 28-bit and 1 52-bit 
shared-key encryption. 3Com strengthens this basic security mechanism with 
additional security features, including MAC address access control lists, IEEE 
802. 1x per-port user authentication with RADIUS server authentication support, 
Temporal Key Integrity Protocol (TKIP), Wireless Protected Access and Extensible 
Authentication Protocol (EAP) support: EAP-MD5, EAP-TLS, EAP-TTLS, and PEAP. 

In addition to standards-based security, 3Com 128-bit Dynamic Security Link 
offers the highest level of security, requiring a user name and password to access 
the wireless LAN. 

Performance and Reliability 

3Com wireless access point performance features ensure reliable and seamless 
connections for users wherever they roam. Automatic channel selection 
automatically finds the least loaded channel for interference-free communication. 
Auto network connect and dynamic rate shifting keep users connected through a 
wide variety of conditions by changing to the optimum connection speed as they 
move through the network. 

Manageability 

3Com offers a wide range of standards-based management support, from SNMP 
to 3Com Network Supervisor and HP OpenView for seamless integration with 
your wired network. 

Wireless Infrastructure Device Manager and Wireless LAN Device Discovery tools 
let you configure parameters, run diagnostics, and monitor performance from 
anywhere on the network using an embedded web server browser. You can also 
update wireless device software on multiple devices using 3Com Network 
Supervisor to simplify bulk updates. 
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With Power over Ethernet (PoE) support, the same Category 5 cable that 
connects your access point to the data network also provides its power. A single 
cable installation dramatically improves your choice of mounting configurations 
because you no longer need to consider AC power outlet locations. PoE support 
makes it easier than ever to overcome installation problems with difficult-to-wire 
or hard-to-reach locations. 



Wireless Network Standards 

Understanding the characteristics of the 802. 1 1 a and 802. 1 1 b standards can help 
you make the best choice for your wireless implementation plans. 

Far-Reaching 802.11b 

802.1 1b operates in the 2.4 GHz band at 1 1 Mbps. Ratified in 1999, it's the most 
widely deployed protocol in the market today due to the Wi-Fi Alliance's 
successful certification efforts that have ensured interoperability. It supports the 
widest coverage — up to 100 meters (328 feet). However, 802.1 1 b is slower than 
802.1 1a and it is subject to a greater risk of radio interference because it operates 
in the more popular 2.4 GHz band. 

Consider 802.1 1b when you need wider coverage and vendor compatibility and 
you are: 

■ Implementing a complete wireless LAN solution, including bridges, gateways, 
access points and clients; Wi-Fi certification guarantees compatibility 
among vendors 

■ Managing a tight budget; 802.1 1 b is extremely price competitive with a wide 
range of vendors and price points 

■ Providing access to hot spots in public spaces such as coffee shops or 
university cafeterias 

■ Running applications that don't require high bandwidth 

High-Performance 802.11a 

Ratified in 2002, 802.1 1a is IEEE's more recent wireless standard. It operates at 
the 5 GHz band and supports data rates at up to 54 Mbps. For those 
organizations demanding even higher speeds, a "turbo mode" feature can boost 
throughput rates up to 108 Mbps. And because there are fewer devices in the 
5 GHz band, there's less potential for RF interference. However, because it is at an 
entirely different radio spectrum, it is not compatible with 802.1 1b. 
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The higher spectrum provides about 50 meters (164 feet) of coverage — about 
half what 802.1 1b offers. 

Consider 802.1 1a when you need high throughput in a confined space and 
you are: 

■ Running high-bandwidth applications like voice, video, or multimedia over a 
wireless network that can benefit from a fivefold increase in data throughput 

■ Transferring large files like computer aided design files, preprint publishing 
documents or graphics files, such as MRI scans for medical applications, that 
demand additional bandwidth 

■ Supporting a dense user base confined to a small coverage area. Because 
802.1 1a has a greater number of non-overlapping channels, you can pack 
more access points in a tighter space. 

Network Configuration and Planning 

The wireless solution supports a stand-alone wireless network configuration as 
well as an integrated configuration with 10/100 Mbps Ethernet LANs. 

The wireless network cards, adapters, and access point can be configured as: 

■ Ad hoc for departmental or SOHO LAN 

■ Infrastructure for wireless LAN 

■ Infrastructure wireless LAN for roaming wireless PCs 

Ad Hoc Wireless LAN 

An ad hoc wireless LAN consists of a group of computers, each equipped with a 
wireless adapter, connected via radio signals as an independent wireless LAN. 
Computers in a specific ad hoc wireless LAN must therefore be configured to the 
same radio channel. An ad hoc wireless LAN can be used for a branch office or 
SOHO operation. 
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PC with Wireless 



PCI Adopter 

Infrastructure Wireless LAN 

The access point can also provide access to a wired LAN for wireless workstations. 
An integrated wired/wireless LAN is called an infrastructure configuration. A Basic 
Service Set (BSS) consists of a group of wireless PC users, and an access point that 
is directly connected to the wired LAN. Each wireless PC in this BSS can talk to any 
computer in its wireless group via a radio link, or access other computers or 
network resources in the wired LAN infrastructure via the access point. 

The infrastructure configuration not only extends the accessibility of wireless PCs 
to the wired LAN, but also increases the effective wireless transmission range for 
wireless PCs by passing their signal through one or more access points. 

A wireless infrastructure can be used for access to a central database, or for 
connection between mobile workers, as shown in the following figure. 




PCI Adapter 



10 



Infrastructure Wireless LAN for Roaming Wireless PCs 



The Basic Service Set (BSS) is the communications domain for each access point. 
For wireless PCs that do not need to support roaming, set the domain identifier 
(SSID) for the wireless card to the SSID of the access point to which you want 
to connect. A wireless infrastructure can also support roaming for mobile 
workers. More than one access point can be configured to create an Extended 
Service Set (ESS). By placing the access points so that a continuous coverage area 
is created, wireless users within this ESS can roam freely. 




PC with Wireless 
* * ,PC! Adapter 



Terminology 

Access Point — An internetworking device that seamlessly connects wired and 
wireless networks. 

Ad Hoc — An ad hoc wireless LAN is a group of computers, each with LAN 
adapters, connected as an independent wireless LAN. 

Backbone — The core infrastructure of a network. The portion of the network 
that transports information from one central location to another central location 
where it is unloaded onto a local system. 

Base Station — In mobile telecommunications, a base station is the central radio 
transmitter/receiver that maintains communications with the mobile 
radiotelephone sets within its range. In cellular and personal communications 
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applications, each cell or micro-cell has its own base station; each base station in 
turn is interconnected with other cells' bases. 

BSS — Basic Service Set. It is an access point and all the LAN PCs that are 
associated with it. 

CSMA/CA — Carrier Sense Multiple Access with Collision Avoidance. 

EAP — Extensible Authentication Protocol, which provides a generalized 
framework for several different authentication methods. 

ESS — Extended Service Set. More than one BSS is configured to become an ESS. 
LAN mobile users can roam between different BSSs in an ESS (ESS-ID, SSID). 

Ethernet — A popular local area data communications network, which accepts 
transmission from computers and terminals. 

Infrastructure — An integrated wireless and wired LAN is called an 
infrastructure configuration. 

Roaming — A wireless LAN mobile user moves around an ESS and maintains a 
continuous connection to the infrastructure network. 

RTS Threshold — Transmitters contending for the medium may not be aware of 
each other (they are "hidden nodes"). The RTS/CTS mechanism can solve this 
problem. If the packet size is smaller than the preset RTS Threshold size, the 
RTS/CTS mechanism will not be enabled. 

VLAN — Virtual Local Area Network. A LAN consisting of groups of hosts that are 
on physically different segments but that communicate as though they were on 
the same segment. 

WEP — Wired Equivalent Privacy is based on the use of security keys and the 
popular RC4 encryption algorithm. Wireless devices without a valid WEP key will 
be excluded from network traffic. 

WPA— Wi-Fi Protected Access. 
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2 Installing the Access Point 



This equipment must be installed in compliance with local and national building 
codes, regulatory restrictions, and FCC rules. For the safety of people and 
equipment, this product must be installed by a professional technician/installer. 

A CAUTION: Before installing, see the important warnings and cautions in "Safety 
Information" on page 14. 

Installation Requirements 

The following items are required for installation: 

■ Access Point 8200, 8500, or 8700 

■ Standard detachable antennas (Access Point 8200 and 8700) 

■ 3Com installation CD. 

■ Wall-mount installation hardware (supplied): mounting plate, mounting 
screws, and plastic anchors for drywall mounting. 

■ If you do not have IEEE 802. 3af power-over-Ethernet LAN equipment, use the 
3Com Integrated Power-over-Ethernet power supply that comes with 

the access point. 

If your LAN equipment complies with the IEEE 802. 3af power-over-Ethernet 
standard, you can connect directly to the equipment, and the 3Com power 
supply is not needed. 

■ Standard category 5 straight (8-wire) Ethernet cable. 

The cable must be long enough to reach the power supply or the 
power-over-Ethernet LAN port. 

If you use the 3Com power supply, you need an additional Ethernet cable to 
connect the access point to the LAN. 

■ To access and use the Web configuration management system, you need a 
computer that is running Internet Explorer 5.0 or newer and one of the 
following operating systems: Windows 98, Windows ME, Windows NT 4.0 
Service Pack 6, Windows 2000, or Windows XP. It is recommended that this 
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computer become the dedicated workstation for managing and configuring 
the access point and the wireless network. 



Power Requirements 

The access point complies with the IEEE 802. 3af power-over-Ethernet standard. It 
receives power over standard category 5 straight (8-wire) Ethernet cable. 
Installation requires the use of either the 3Com power supply provided or 
IEEE 802. 3af compliant power supply equipment (output power rated 48 V dc @ 
350 mA maximum). Such equipment must be safety certified according to UL, 
CSA, IEC or other applicable national or international safety requirements for the 
country of use. All references to the power supply in this document refer to 
equipment that meets these requirements. 

Because the power supply plug is the only means of disconnecting the access 
point from power, make sure the power outlet is accessible. 

See "Using the Power Supply" on page 18 and "Using a Power-Over-Ethernet 
LAN Port" on page 19. 

SNote for use of the 3Com power supply (part number 61-0107-000) in Norway: 
This product is also designed for use on an IT power system with phase-to-phase 
voltage of 230 V. 



Safety Information 

This equipment must be installed in compliance with local and national building 
codes, regulatory restrictions, and FCC rules. For the safety of people and 
equipment, only professional network personnel should install the access point, 
cables, and antennas. 

A CAUTION: If you supply your own Ethernet cable for connecting power, be sure that it is 
category 5 straight-through (8-wire) cable that has not been altered in any way. Use of 
nonstandard cable could damage the access point. 

A CAUTION: To comply with FCC radio frequency (RF) exposure limits, a minimum 
body-to-antenna distance of 1 meter (3 feet) must be maintained when the access point 
is operational. 

A CAUTION: To avoid possible injury or damage to equipment, you must use either the 
provided power supply or IEEE 802. 3af compliant power supply equipment that is safety 
certified according to UL, CSA, IEC, or other applicable national or international safety 
requirements for the country of use. All references to power supply in this document refer 
to equipment meeting these requirements. 
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A CAUTION: The 3Com power supply (part number 61-0107-000) input relies on a 16A 
rated building fuse or circuit protector for short circuit protection of the line to neutral 
conductors. 

A CAUTION: It is the responsibility of the installer to ensure that the Power-over-Ethernet 
(POE) power supply is properly connected. Connection to any other device, such as a 
standard Ethernet card or another POE supply, may result in permanent damage to 
equipment, electric shock, or fire. Refer to the installation instructions for proper 
installation 



Deciding Where to Place Equipment 

The access point ideally designed for vertical installation on a wall surface, but 
can also be flat-surface mounted in an elevated location where it will not 
be disturbed. Ceiling installation is not recommended. 

Whether you choose to mount the access point on a wall or place it on a flat 
surface, make sure to select a clean, dry location that is elevated enough to 
provide good reception and network coverage. Do not mount the access point on 
any type of metal surface. Do not install the access point in wet or dusty areas. 
The site should not be close to transformers, heavy-duty motors, fluorescent 
lights, microwave ovens, refrigerators or any other electrical equipment that can 
interfere with radio signals. 

If you are connecting the access point to a wired network, the location must 
provide an Ethernet connection. You will need to run an Ethernet cable from the 
power supply to the access point. 

An access point provides coverage at distances of up to 100 Meters (300 Feet). 
Signal loss can occur if metal, concrete, brick, walls, floors or other architectural 
barriers block transmission. If your location includes these kinds of obstructions, 
you may need to add additional access points to improve coverage. 

If you plan to use an optional antenna instead of the standard detachable 
antennas that are supplied, review "" on page 21 before selecting the final 
location and be sure to allow for routing the antenna cable as required. 

For optimal performance, ensure the access point operates in temperature 
ranges between -10° C to 40° C (14° F to 104° F). 

S Regulatory restrictions dictate that when this device is operational, the minimal 
body-to-antenna distance is 1 Meter (3 Feet). 
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Before You Begin 

Record the access point MAC address in a safe place before the access point is 
installed in a hard-to-reach location. The MAC address is printed on the back of 
the access point housing. 

The following illustration shows the front and rear views of the access point, 
including the LEDs and connecting ports. 




Console port 
Ethernet port 



Access Point 8500 Access Point 8200/8700 



|\ Caution: Do not connect a telephone cable into the Console port; doing so can 
— cause serious damage to the access point. 



Connecting the Standard Antennas 

The Access Point 8200 is supplied with standard detachable antennas. These 
should be attached before the access point is installed. If using an alternate 
antenna, see "Selecting and Connecting a Different Antenna Model" on 
page 22. 

1 Carefully unpack the standard detachable antennas. 




CAUTION: Do not handle the antenna tips, especially after they are connected 
to the access point, as this could lead to electrostatic discharge (E5D), which 



could damage the equipment. 
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2 Screw an antenna into each of the sockets in the access point housing. 

3 Hand-tighten the antennas at the very base of the SMA connectors without 
handling the antenna tips. 

4 Access Point 8200: Position the antennas so they turn out and away from the 
access point at a 45-degree angle. After network startup, you may need to 
adjust the antennas to fine-tune coverage in your area. 



Depending on the coverage required for your site, you may want to replace 
the standard detachable antennas with one of the external antennas available 
for use with the access point. See "" on page 21 . 



It is advisable to connect the power and check the Ethernet cables and LEDs 
before installing the unit in a hard-to-reach location. 

The access point complies with the IEEE 802. 3af power-over-Ethernet standard. It 
receives power over a standard category 5 straight (8-wire) Ethernet cable. 

There are two ways to supply power to the access point: 

■ Use the 3Com Integrated Power-over-Ethernet power supply. In this 
case, you need to supply a second Ethernet cable to connect to the wired LAN. 

■ Connect the access point directly to your own power-over-Ethernet hub or 
switch, which must also comply with the IEEE 802. 3af standard. 




J Rotate for 
-v. best reception. 



Connecting Power 
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If you supply your own Ethernet cable for connecting power, be sure that it is 
standard category 5 straight-through (8-wire) cable that has not been altered 
in any way. Use of nonstandard cable could damage the access point. 



"To Access Point" 




Using the Power Supply Using A Power-over-Ethernet 

LAN Port 

Using the Power Supply 

CAUTION: To avoid damaging network equipment, make sure that the cables 
are connected from access point to power supply to LAN as shown above and 
described below. 

The power supply can be located at any point between the access point and the 
LAN access port, wherever a convenient power outlet exists. If you supply your 
own Ethernet cable for connecting power, be sure that it is standard category 5 
straight-through (8-wire) cable that has not been altered in any way. Use of 
nonstandard cable could damage the access point. 

Refer to the illustration above, and follow these steps: 

1 Connect one end of the Ethernet cable to the Ethernet port on the access 
point. 

2 Connect the other end of the Ethernet cable to the port labeled To Access 
Point on the power supply. 

3 Connect the power cord to the power supply and plug the cord into a power 
outlet. 
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4 To link the access point to your Ethernet network, plug one end of another 
Ethernet cable into the port labeled To Hub/Switch on the power supply, and 
plug the other end into a LAN port (on a hub or in a wall). 

Using a Power-Over-Ethernet LAN Port 

If your LAN equipment complies with the IEEE 802. 3af power-over-Ethernet 
standard, you can connect the access point directly to a LAN port. For example, 
the illustration above right shows a connection through a 3Com Ethernet Power 
Supply to a 3Com SuperStack® Switch. 



Checking the LEDs 



When power is connected, the access point LEDs light. The illustration and the 
following table describe the LEDs and their functions. 




Name Description 

Radio LED blinks red to indicate radio activity. Faster 
blinking indicates more activity. 

Power LED lights green when operational code 
is running. 

Reset Press this button and hold for 1 5 seconds to 
Button restore the factory defaults. 

Ethernet LED lights yellow when Ethernet link is 

established. LED blinks to indicate activity on 
the Ethernet. Faster blinking indicates 
more activity. 

Radio LED blinks red to indicate radio activity. Faster 
blinking indicates more activity. (This LED is 
only active when a second radio is installed.) 



Mounting on a Wall 



CAUTION: The mounting plate is designed for wall mount installation only. To 
\\ avoid equipment damage and possible injury, do not use the mounting plate for 
a ceiling installation. 

The access point comes equipped with all the necessary hardware for mounting 
on a wall, including a mounting plate. For a secure installation, the mounting 
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plate should be placed perpendicular to the floor, with the arrow pointed up, as 
indicated on the mounting plate, with the smooth side against the wall. 



1 Install the mounting plate as shown in the following illustration, on either a 
stud (or other hard wall surface), or onto dry wall. 



■ Allow for a clearance of at least 25 cm (1 0 Inches) between the ceiling and 
the top of the mounting plate. 

■ Make sure that "UP" is correctly oriented, and align the mounting plate 
screw holes vertically. 

■ For installation on a wall stud, install the top screw into the stud, as shown 
at left in the illustration, and then vertically align the mounting plate before 
installing the bottom screw. 

■ For installation on to drywall, mark three screw holes using the mounting 
plate as a template for vertical alignment, as shown at right in the 
illustration above. 

■ Use a 5-mm (3/16-in.) drill bit if using the plastic anchors provided. 

■ For drywall mounts, you can route the cable through either a side or center 
opening for a seamless appearance using one of the methods illustrated 
below. Alternatively, you can simply attach the Ethernet cable to the side of 
the unit, allowing it to trail along the wall. 

■ If you have routed the Ethernet cable through the center opening, secure 
the cable on the hook located on the mounting plate as shown in the 
illustration below. 

2 Connect the Ethernet cable to the Ethernet port on the access point. 



If installing into a stud or other 
secure vertical surface, use 2 screws. 



If installing into drywall, use 
3 plastic anchors and 3 screws. 
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3 Position the access point at an angle to the mounting plate bayonet 
connection and turn the unit clockwise until it snaps into place, as shown 
below. 



Leave at least 13 cm (5 in.) length. Hold the access point at an angle. Turn 

Ethernet cable may be routed through clockwise to engage and secure it on 

center opening or through the side. the mounting plate. 




Flat Surface Installation 

The access point can also be placed on a flat surface such as a table, desktop or 
filing cabinet. Do not install the access point on any type of metal surface. If you 
choose a flat surface mount, select a location that is clear of obstructions and 
provides good reception. 




Connect 



Ethernet cable. 

ENote: Regulatory restrictions dictate that when this device is operational, the 
minimal body-to-antenna distance is 1 Meter (3 Feet). 
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Selecting and Connecting a Different Antenna Model 



The standard detachable antennas supplied with the Access Point 8200 are 
suitable for a broad variety of environments. If you require a different type of 
antenna for the Access Point 8200, several options are available by model 
number from the 3Com Web site (www.3Com.com). (Access Point 8500 does 
not support interchangeable antennas.) 

For each of the antenna models, you will need either a 6-foot accessory cable 
(model 3CWE480) or a 20-foot accessory cable (model 3CWE481) to provide the 
transition from the SMA connector on the access point to the N-type connector 
on the antenna. 

To ensure the physical safety of anyone near the antenna and to prevent damage 
to the access point, follow the building codes for antenna installations in your 
area. Also, when connecting the optional antenna to the access point, remember 
to use only the A-side connector on the access point, on the right when 
properly installed. 




1 Position the antenna so that there are minimal obstacles between it and any 
client with which it will communicate. While maintaining a direct line of sight 
between the antenna and a client is not strictly necessary, such an 
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arrangement helps to ensure a strong signal. Ensure that access is available 
for routing the antenna cable from the antenna to the access point. 

2 If they are installed, remove both arms of the standard detachable 
antenna, making sure not to handle the tips of the antenna. 

3 Connect one end of the optional antenna cable to the antenna and secure 
the antenna in place. 

4 Connect the free end of the antenna cable to the right-hand side connection 
on the access point, as shown in the illustration above. 

5 Make certain that the antennas and antenna masts are appropriately 
grounded to prevent injury or damage from lightning strikes. 

Installing Software Utilities 

The installation CD includes documentation and software utilities to help you set 
up and administer the wireless components of your network. 

To view product documentation, select View the Documentation from the CD 
Startup Menu and then select the item you wish to view. 

The software Tools and Utilities include: 

■ 3Com Wireless Infrastructure Device Manager. Use this tool to discover 
access points and select devices for administrative changes. 

■ 3Com 3CDaemon Server Tool. This tool can act in four different capacities: 

■ As a TFTP Server, necessary for firmware upgrades, and backup and restore 
functions. Use this option if you do not have a TFTP server set up. 

■ As a SysLog Server, which is necessary to view SysLog messages. 

■ As an optional TFTP Client. 

■ As an optional FTP Server. 

■ 3Com Network Supervisor . The 3Com Network Supervisor (3NS) 
graphically discovers, maps, and displays network links and IP devices, 
including 3Com wireless access points. It is not required for access point 
management. 

■ Internet Explorer 5.5. This browser is included for those who do not have a 
suitable browser. 

To install a tool from the CD: 

1 Power up the computer and put the 3Com CD in the CD-ROM drive. 

2 The setup menu should appear when the CD autostarts. If no menu appears, 
you can run the setup.exe startup program from the Windows Start menu. 
For example, if your CD drive is the D drive: Start / Run / d:setup.exe. 

3 From the CD startup menu, select Tools and Utilities. 

4 Select the item you want to install and follow the instructions on the screen. 
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3 System Configuration 



The access point can be configured using a Web browser that has Java support 
(Internet Explorer 5.0 or newer). Using the Web management interface, you can 
configure the access point and view statistics to monitor network activity. 

The 3Com Wireless Infrastructure Device Manager helps you locate 3Com 
wireless LAN devices on the network, select a device and view its properties, and 
launch the device's configuration in your Web browser. To configure a device, the 
device manager must be installed on a computer that has an Ethernet adapter 
and is running a supported Windows operating system and Web browser. 

Using the 3Com Wireless Device Manager 

After the 3Com Wireless Device Manager is installed, ensure that the device to be 
configured is either wired to the network, associating with the wireless network, 
or connected directly to the computer, and connected to power. If more than one 
device using the factory default name is connected, make a note of the MAC 
address of the device you want to select so that you can identify it in the 
device manager. 

Launching a Wireless Device Configuration 

If you do not have a DHCP server on your network, it can take up to one minute 
for a device to become discoverable after it has been powered up. 

1 To launch the 3Com Device Manager, select Start /Programs l3Com 
Wireless/Wireless Infrastructure Device Manager. 

If you have more than one network adapter installed on your computer, you 
may be prompted to choose a network adapter. Choose the appropriate 
adapter and click OK. 

The Wireless Network Tree appears in the 3Com Wireless Infrastructure 
Device Manager window. The tree lists all WLAN service areas on the network 
and expands to show the 3Com wireless LAN devices that are associated to 
each service area. Devices in a different subnet than your computer are 
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identified with exclamation points (!). You can refresh this display by clicking 
Refresh. You should refresh the display, for example, after you change a 
device IP address. 

2 In the Wireless Network Tree, select the device you want to configure. 

If more than one wireless LAN device appears in the tree and you are not sure 
that you have selected the right one, click Properties and check the MAC 
address to verify that it is the one you want. 

3 Click Configure. 

■ If the selected device is on the same subnet as your computer, the 
configuration management system main page appears in your Web 
browser. (If a password is set on the device, enter it when prompted.) 

■ If the selected device is on a different subnet, the Pre-IP Configuration 
Wizard is activated automatically. This wizard lets you configure the IP 
settings for the selected wireless device. It proposes IP address and subnet 
mask settings derived from your computer's settings, so the selected device 
will then reside on the same subnet as your computer. You can accept the 
suggested settings or change them as required. For more information, see 
"Using the Pre-IP Configuration Wizard" on page 26. 

The next window prompts for an administrative password to allow the new IP 
address to be set. When the units are shipped from the factory, there is no 
administration password and you should leave the password field blank. If an 
administration password has been set for the device, enter the password and 
click Next. The 3Com Web Configuration Management System main screen 
appears in your Web browser. 

The following table describes the functions of the buttons in the 3Com Wireless 
Infrastructure Device Manager window. 



Button Description 



Properties Displays the following properties of the selected device: Device Name, 

Device Type, Wireless LAN Service Area (ESSID), IP Address, Subnet Mask, 
and MAC Address. 

Configure Launches the Configuration Management System for the selected device. If 
the selected device is on a different subnet, you are prompted to assign an 
address on the same subnet as your computer. 

Refresh Scans the network and displays the connected 3Com 1 1 Mbps Wireless 
LAN devices. 

Choose NIC If your computer has more than one network interface card installed, 
allows you to choose which card you want to use. 

Close Closes the device manager window and ends the session. 

Help Launches the device manager help page in your browser. 
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Using the Pre-IP Configuration Wizard 



You can only configure devices that are on the same subnet as your computer. To 
configure a device on a different subnet, you must first assign it an IP address on 
the same subnet as your computer. After you launch the configuration, you can 
change settings as usual. Just before you finish, you must change the device IP 
address back to its original setting. Follow this procedure: 

1 In the Wireless Infrastructure Device Pre-IP Configuration window, accept the 
suggested settings or change them as required. You can assign a static IP 
address or specify that the device obtain its IP address from a DHCP server. 

2 The next window prompts for an administrative password. When the units 
are shipped from the factory, there is no administration password and you 
should leave the password field blank. If an administration password has 
been set for the device, enter the password and click Next. The Configuration 
Management System main page appears in the Web browser. 



Configuration Login 

After you launch the configuration from the device manager, the login page 
appears in your browser. The default Username is admin and the default 
password is no password. For an initial configuration, enter the default Username 
and click LOGIN. Then set the Country Code as described below. 

Setting the Country Code 

The Country Code determines the available channels and transmission power 
level based on regulatory restrictions in the country where the access point is 
installed. The first time you log in, you must set the Country Code. Thereafter, 
you can change the country code on the Administration page. 

To ensure compliance with local regulations, be sure to select the country in 
which the access point is installed. 

In the Country Code page, select the country from the pull-down list and click 
Apply. The Home page appears. 
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Basic Setup 



For a basic configuration, use the Setup Wizard as described below. 

At any time, you can click Home to return to the Home page of the configuration 
interface. If you want to configure more advanced features, click Advanced Setup 
in the Home page. 

1 In the Home page, click Setup Wizard. 

2 In the " 1 -2-3" Setup Wizard page, click Next to start basic configuration. 

3 In the SSID page, enter the same Service Set ID as the other wireless devices 
in your network and click Next. (The SSID may be up to 32 alphanumeric 
characters and is case sensitive.) 

4 In the Channel page, select the channel options for the access point radios 
and click Next. The channel options are: 

802.11a — You can select from these options: 

■ Turbo Mode — In some countries you can use Turbo Mode, allowing the 
access point to operate with a data rate of up to 1 08 Mbps. If Turbo Mode 
is not allowed in your country, this option is not available. 

■ 802.1 1a Radio Channel — Set the operating radio channel number. 

■ Auto Channel Select — When this mode is enabled, the access point selects 
a radio channel automatically. 

802.11b — Set the operating radio channel number. 

5 In the TCP/IP Settings page, you can choose whether the access point obtains 
its IP address from a DHCP server or uses a static IP address. Configure the 
DHCP Client settings and click Next. 

6 In the Security page, make selections and click Next. 

For details on security settings, see "Security" on page 37. 

7 Click Finish. 

8 Click OK to restart the access point. 

Advanced Setup 

The Advanced Setup pages allow you to configure features that are not available 
in the basic setup. On the Home page, click Advanced Setup to open the 
Advanced Setup menu. 

After making selections and entering data on each page, click Apply to save the 
changes. 
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The following sections describe the Advanced Setup pages. 

Identification 

On the Identification page, you can identify the access point by providing a 
descriptive name. This name then appears in the device manager window. Enter a 
maximum of 32 alphanumeric characters in the System Name field and 
click Apply. 

TCP/IP Settings 

On the TCP/IP Settings page, you can configure TCP/IP (Transmission Control 
Protocol/Internet Protocol) settings as described below. When you are finished 
configuring items on this page, click Apply. 

DHCP Client 

When DHCP (Dynamic Host Configuration Protocol) Client is enabled, and a 
DHCP server is located on the network, the network DHCP server assigns the IP 
address, subnet mask and default gateway to the access point. 

If there is no DHCP server on the network, the access point automatically uses its 
default IP address, 1 69.254.x.y (where x and y are random numbers). 

When DHCP Client is disabled, you can specify the IP setup as follows: 

■ IP Address and Subnet Mask — If you configure an IP address and subnet 
mask, you must configure the network settings of the computers on your 
wireless LAN to use the same subnet mask. The IP addresses specified must be 
valid on the same subnet. 

■ Default Gateway — The default gateway address is optional, but may be 
required by your Internet Service Provider. 

■ Primary DNS Address and Secondary DNS Address — The Domain Name 
Servers (DNS) map numerical IP addresses to the equivalent domain name (for 
example, www.3Com.com). Your internet service provider should provide the 
IP address of one or more domain name servers. Enter those addresses in 
Primary DNS Address and Secondary DNS Address fields. 

Secure Web Server Connection 

This option controls whether Secure Socket Layer (SSL) technology is used to 
encrypt information between the computer and the device during a configuration 
session. By default this option is Off. When this option is turned on, the HTTPS 
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protocol is used, and data is protected during the configuration session. When it 
is turned off, the HTTP protocol is used, and data could be intercepted during the 
configuration session. 

Changing this option causes the device to reset, which disrupts the network 
association temporarily, but does not affect device configuration settings that 
have already been saved. 

When the Secure Web Server Connection is On, you must specify "https://" in the 
browser window address pane when launching the configuration. 

RADIUS 

The RADIUS page lets you define the servers to be used for authentication. 
RADIUS (Remote Authentication Dial-in User Service) is a logon authentication 
protocol that uses software running on a central server to control access to 
RADIUS-compliant devices on the network. It allows an access point to send the 
connection parameters to a RADIUS server. Enter the required parameters for a 
primary and secondary RADIUS server. 

Configuring a secondary RADIUS server provides a backup in case the primary 
server fails. The access point will use the secondary server if a failure is detected 
in the primary server. Once the access point switches over to the secondary 
server, it periodically attempts to establish communication again with primary 
server. Once communication is established, the secondary server reverts back to a 
backup server. 

The parameters are described below. When you are finished configuring items on 
this page, click Apply. 

m IP Address — The address of the authentication server. 

■ Port — The network (UDP) port of the authentication server used for 
authentication messages. The port defaults to 1812 and must match the port 
configured on the RADIUS server. 

■ Key — The encryption key a shared ASCII string that is used to authenticate 
logon access for the client. The maximum length is 255 characters. Do not use 
blank spaces in the string. The key must be configured the same on both the 
access point and the RADIUS server. 

■ Timeout — The number of seconds the access point waits for a reply from the 
RADIUS server before it resends the request. 

■ Retransmit attempts — The number of times the access point will try to 
authenticate logon access via the authentication server. 
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Authentication 

The Authentication page allows you to configure the type of upper-layer 
authentication the access point uses for wireless clients. Access is checked against 
the authentication database stored on the access point. 

This level of authentication occurs before any 802. 1x authentication configured 
on the Security page. 

Configure the options as described below. When you are finished, click Apply. 

a MAC Authentication — Selecting MAC authentication allows you to define 
access permission and precedence. Options are: 

Local MAC. With this option, the MAC address of the associating station is 
compared against the local access control list. You must build this list (called 
the MAC Authentication Table) as described in Local MAC Authentication 
below. 

RADIUS MAC. With this option, the MAC address of the associating station 
is sent to the configured RADIUS server for validation. You must specify the 
authentication sequence and the corresponding parameters for the remote 
authentication protocol. See "RADIUS" on page 29 and "802.1 1x 
Setup" below. 

Disable. No checks are performed on an incoming client. 

■ 802. 1x Setup — 802. 1 x is designed to enhance the security management of 
the wireless network. Select one of the following options: 

Disable. The access point will neither initiate nor respond to any 802. 1x 
authentication requests to or from wireless clients. 

Supported. Legacy clients (non 802. 1x) and 802. 1x clients are both 
supported. This is provided for ease of migration. 

Required. Clients authenticate to a RADIUS server via the access point. 
Clients are not allowed onto the wired LAN until authentication is successful. 

When 802. 1x is enabled, the broadcast and session key rotation intervals can 
also be configured. Set these values to force the periodic refresh of broadcast 
or session keys for each 802. 1x client. 

First set up the RADIUS MAC authentication for the client on the RADIUS 
server. (See "RADIUS" on page 29.) Select Supported or Required on the 
802. 1x Setup field. Enter data as described in the following table. 

Field Default Description 

Broadcast Key Refresh Rate 0 Defines how long the RADIUS server will 

(minutes) refresh the primary broadcast key. 
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Field 



Default Description 



Session Key Refresh Rate 


0 


Defines how long the RADIUS server will 




(minutes) 


dynamically re-assign a session key to a 






connected client station. 


802. 1x Reauthentication 


0 


Defines how long the RADIUS server will 


Refresh Rate 


(seconds) 


dynamically reassign session keys to 






connected client stations. 



■ Local MAC Authentication — Client computers can be filtered using the 
unique MAC addresses of their network cards. To build the MAC 
Authentication Table, enter a MAC address in the space provided, choose the 
permission, and click Update. MAC addresses are listed in the MAC 
Authentication Table in the order that they were entered. The Local MAC 
Authentication parameters are described in the following table: 



Parameter 



Description 



System Default 
MAC Address 



Permission 
Update button 



Define the default filtering setting as Deny or Allow. 

Enter the MAC address of a client for the access control. You 
can find the MAC address of a network card as follows: 

Windows 95/98/ME — Click Start/Run. Type winipcfg and 
press Enter. The MAC address is in the Adapter 
Address section. 

Windows NT4/2000/XP — At the command prompt, type 
ipconfig /all and press Enter. The MAC address is listed as the 
Physical Address. 

Linux — Run the command "/sbin/ipconfig." The card's MAC 
address is the value after the word "HWaddr." 

Allows or denies access to the access point of devices 
matching the specified MAC address. 

Click Update to refresh the MAC Authentication Table. To 
avoid the possibility of entering an invalid MAC address on 
the Authentication page, always click Update after typing the 
address. If you press Enter, address error checking does 
not occur. 



Filter Control 

The Filter Control page allows you to control client communication within the 
wireless network. You may enable one or more types of supported filtering; 
however, some filter choices may supersede others. Configure the options as 
described below. When you are finished, click Apply. 
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Filtering by VLAN 



The access point supports filtering of up to 64 VLANs (virtual local area networks). 
The VLAN IDs must be configured for each client on one of the servers specified 
on the RADIUS configuration page. 

When VLAN filtering is enabled, the access point queries the server for the 
VLAN IDs of associating clients and saves the VLAN IDs. If a client does not have a 
VLAN ID, the access point assigns its own native VLAN ID to that client. 

To enable VLAN filtering, enter a VLAN ID (a number between 1 and 4095) in the 
Native VLAN ID field and select VLAN Enable. 

When VLAN filtering is disabled, the access point ignores VLAN-tagged frames. 

Security Filters 

These options allow you to block communication among wireless clients 
(client-to-client blocking) and prevent wireless clients from performing access 
point administration. 

■ Local Bridge Filter — Enable this filter to prevent direct communication 
between wireless clients, creating a more secure wireless network. 

■ AP Management Filter — Enable this filter to prevent wireless clients from 
accessing the access point for management; for example through TELNET or 
SNMP. 

Filtering by Ethernet Protocol Type 

Use the Ethernet Type Filter table to filter out Ethernet packet frames that match 
the Ethernet protocol type. Select Ethernet Type Filter Enable, then set the status 
of each Ethernet frame type in the list. 

Although there are five types of IPX packets, the Filter Control page shows only 
two options for IPX filtering. The following table shows how to filter each IPX 
packet type: 

ISO Designator Filter 

8138 Enable 8138 

8137 Enable 8137 

802.3(Raw) Enable 8138 

802.2 Enable 8138 

SNAP Enable 8137 
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SNMP 



Use the SNMP page to display and enter a community string for the Simple 
Network Management Protocol. To communicate with the access point, the 
SNMP agent must first be enabled and the Network Management Station must 
submit a valid community string for authentication. Select SNMP Enable and 
enter data into the fields as described below. When you are finished, click Apply. 

m Location — Specifies the access point location. 

■ Contact — Sets the system location string that describes the system location. 
(Maximum length: 255 characters) 

■ Community Name (Read Only) — Specifies a community string with 
read-only access. Authorized management stations are able to retrieve MIB 
objects. (Maximum length: 23 characters) 

■ Community Name (Read/Write) — Specifies a community string with 
read-write access. Authorized management stations are able to both retrieve 
and modify MIB objects. (Maximum length: 23 characters) 

■ Trap Destination IP Address — Fill in the IP address box for a trap manager 
that will receive these messages. 

■ Trap Destination Community Name — Fill in the community string box for a 
trap manager that will receive these messages. (Maximum length: 

23 characters) 

Administration 

The Administration page allows you to perform access point management tasks 
as described below. 

■ Change Country Code — The Country Code determines the available 
channels and transmission power level, based on regulatory restrictions for the 
country where the access point is installed. To ensure compliance with local 
regulations, be sure to select the country in which the access point is installed. 
To change the Country Code, select a country from the pull-down list and 
click Apply. 

■ Change Password — A password is required to configure the access point. 
Enter the user name and new password in the spaces provided and click 
Apply. It is recommended that you change the password from the default 
value (no password) to ensure network security. 

■ Firmware Upgrade — You can upgrade firmware from a downloaded file that 
you have placed on the local computer, or from a remote FTP or TFTP server. 
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■ Local — Click Browse to locate the downloaded firmware file. Click Start 
Upgrade to start the upgrade process. The upgrade takes place through 
the HTTP protocol from the local machine. 

■ Remote — Select FTP or TFTP Enter the firmware file name, the host IP 
address where the file is stored, the user name, and the password. Click 
Start Upgrade to start the upgrade process. 

■ Factory Settings — Click Restore to load the factory default configuration and 
reboot the access point. All user-configured information is lost. You must 
reenter the default user name (admin) to regain management access to this 
device. 

■ Reset Access Point — Click Reset to perform a hardware reset of the 
access point. Current configuration settings are not changed. 

System Log 

The System Log page allows you to set up a server to store event logs and to 
specify how the access point obtains the date and time. When you are finished 
configuring items on this page, click Apply. 

Each logging message is tagged with a severity level, as defined in RFC31 64. The 
severity levels are: 

■ Emergency: system is unusable 

■ Alert: action must be taken immediately 

■ Critical: critical conditions 

■ Error: error conditions 

■ Warning: warning conditions 

■ Notice: normal but significant condition 

■ Informational: informational messages 

■ Debug: debug-level messages 

To set up a server for event logs: Select System Log Setup Enable, select a 
logging severity level from the pulldown list, enable the Logging Host and 
Logging Console, and enter the IP address of the server in the space provided. 

To designate an SNTP server for obtaining the date and time: Select SNTP 
Server Enable and enter the IP addresses for primary and secondary SNTP servers 
in the spaces provided. 

To use the access point as an SNTP server: Select SNTP Server Disable, specify 
time values in the spaces provided, select the time zone from the pull-down list. If 
you check the Enable Daylight Saving check box, the time will adjust 
automatically for standard and daylight saving time. When the SNTP Server 
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setting is disabled, date and time settings revert to the defaults after an access 
point is reset, affecting the accuracy of log reports. To avoid this situation, enable 
the SNTP server setting and allow the access point to obtain the date and time 
from an SNTP server. (The event log page will display the default time after a reset 
until the access point receives the correct information from the SNTP server.) 

Status 

The Status pages display additional information about the access point status and 
station status. 

■ AP Status — Click AP Status to view the access point system configuration and 
access point wireless configuration. 

■ Stations Status — Click Stations Status to view the configurations of 
connected stations. The Station Status page displays basic connection 
information for all associated stations. The page is automatically refreshed 
every five seconds. 

■ Event Logs — Click Event Logs to display the activity log of the access point. 
The event log resets to zero if the access point is reset. The log saves 128 
events, then overwrites the first event and continues. 

Radio Interface 

The access point radio interface detects the number of radios installed and their 
type (802.1 1a Radio or 802.1 1b Radio). The Radio Settings and Security options 
for the radio interface are described in the following sections. 

Radio Settings 

Some radio settings are available only on the 802.1 1a radio, as noted in the 
descriptions below. When you are finished configuring items on this page, 
click Apply. 

m Country Code — The Country Code is displayed at the top of the Radio 
Settings page. To change the country code, see "Administration" on page 33. 

■ SSID — Enter the Service Set ID (up to 32 alphanumeric characters). Clients 
must set their SSIDs to match the access point. The SSID is case sensitive. 

■ Turbo Mode (802.11a only) — Turbo Mode is an enhanced wireless LAN 
operating mode that can provide a higher data rate. The normal mode of the 
802.1 1a radio provides connections up to 54 Mbps. Select Turbo Mode Enable 
to allow the radio to provide connections up to 1 08 Mbps. 
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In normal mode the channel bandwidth is 20 MHz. In Turbo Mode the 
channel bandwidth is increased to 40 MHz. However, only a limited number 
of channels are available when Turbo Mode is enabled. 

Turbo Mode is not regulated in the IEEE 802.1 1 a standard, and it is not 
allowed in some countries. 

Radio Channel — From the pull-down list, select the radio channel over which 
the access point communicates to computers in its BSS. Available channel 
settings are limited by local regulations that determine which channels are 
allowed. The client channel for wireless users is automatically set to that used 
by the access point to which they are linked. When multiple access points are 
deployed in the same area, be sure to choose channels separated by at least 
five channels to avoid channel interference. You can deploy up to three access 
points in the same area; for example, Ch 1 , Ch6, and Ch 1 1 . 

Auto Channel Select (802.11a only) — Select Auto Channel Select Enable to 
allow the access point to select a radio channel automatically. (Default: Enable) 

Transmit Power (802.11a only) — Set the signal strength transmitted from 
the access point. The longer the transmission distance, the higher the 
transmission power required. (Default: 100%) 

Maximum Station Data Rate — Select the appropriate data rate from the 
drop-down list for the data transfer speed running on your network. (802.1 1 a 
default: 54 Mbps; 802. 1 1 b default: 1 1 Mbps.) In order to reach all clients, this 
rate should be set lower (for example, 1 or 2 Mbps on an 802.1 1b radio). To 
isolate clients that are unable to connect at higher rates, set this value higher. 

Beacon Interval (20-1000) — Sets the beacon signal interval at which beacon 
frames are transmitted from the access point. The beacon signals allow 
wireless devices to maintain contact with each other. They may also carry 
power-management information. The Beacon Interval unit isTU, which 
corresponds to 1024 microseconds. (Default: 100 TU) 

Fragment Length (256-2346) (802.11a only) — The Fragment Length can be 
set between 256 and 2,346. If the packet size is smaller than the preset 
fragment size, the packet will not be segmented. 

Fragmentation of the PDUs (Package Data Unit) can increase the reliability of 
transmissions because it increases the probability of a successful transmission 
due to smaller frame size. If there is significant interference present, or 
collisions due to high network utilization, try setting the fragment size to 
send smaller fragments. This will speed up the retransmission of smaller 
frames. However, it is more efficient to set the fragment size larger if very 
little or no interference is present because it requires overhead to send 
multiple frames. (Default: 2346) 
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■ RTS Threshold (0-2347)— Set the RTS (Request to Send) frame length. You 
may configure the access point to initiate an RTS frame sequence always, 
never, or only on frames longer than a specified length. If the packet size is 
smaller than the preset RTS threshold size, the RTS/CTS mechanism will not 
be enabled. 

The access point sends RTS frames to a particular receiving station to 
negotiate the sending of a data frame. After receiving an RTS frame, the 
station sends a CTS (Clear to Send) frame to acknowledge the right of the 
sending station to send data frames. The access points contending for the 
medium may not be aware of each other. The RTS/CTS mechanism can solve 
this hidden node problem. (Default: 2346) 

■ Preamble Setting (802.11b only)— IEEE 802.1 1 frames begin with an 
alternating pattern of 1s and 0s called the preamble, which tells receiving 
stations that a frame is arriving. This provides time for the receiving station to 
synchronize to the incoming data stream. Enabling the Short preamble can 
boost your throughput; however, this can cause interoperability issues. 
(Default: Long) 

Security 

The Security page allows you to set up lower-layer client authentication and data 
encryption parameters as described below. When you are finished configuring 
items on this page, click Apply. 

Configuring Authentication 

Three types of authentication can be configured: 

■ Open System (the default) — Allows access to everyone. 

■ Shared Key — If Shared Key is enabled, Encryption must also be enabled as 
described in "Configuring Encryption" on page 38. 

■ 128-Bit Dynamic Security Link — This option can only be used with other 
3Com Wireless LAN devices. It is the highest level of security, requiring a user 
name and password to access the wireless LAN. The user name and password 
set up on the access point must match those set up on the clients. Each 
network session creates a unique, one-time encryption code. 

To enable 1 28-bit Dynamic Security Link authentication, follow these steps: 

1 Select 128-bit Dynamic Security Link. 

2 Decide whether to require Windows user authentication: 
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If you check the Require Windows user authentication check box, clients will 
be required to enter a user name and password every time they associate 
with the network. If you leave this box unchecked, the system will 
authenticate clients based on the access control list and the saved passwords 
on the clients. 

3 Set up a User Access List: 

There must be at least one entry in the User Access List, which determines the 
users that can associate with the access point. 

Click Edit User Access List. In the User Access List page, user names are listed. 
Scroll to the bottom of the list to perform the following actions: 

To add a new user, click Add Users. In the next page, type the user name and 
password in the spaces provided and click Apply. 

To delete users, click Delete Users. In the next page, check the check boxes 
next to the names to be deleted and click Apply. 

To modify a password, click Change Password. In the next page, select the 
user name from the pull-down list. Enter the new password in the spaces 
provided and click Apply. 

Configuring Encryption 

There are two types of data encryption available: 

■ WPA— Wi-Fi Protected Access. 

■ WEP — Wired Equivalent Privacy 

The access point and the wireless devices must have the same encryption settings 
to communicate. You can choose to allow only clients using WPA encryption, or 
you can allow both WPA and WEP clients. 

The following sections describe how to configure each type of encryption. When 
you are finished configuring the encryption, click Apply. 

WPA Configuration 

To configure WPA encryption: 

1 Under Encryption, select Enable. 

2 Under WPA Configuration, click the Required check box if you want to limit 
access to clients using WPA encryption. If you also want to allow WEP clients, 
do not check this box. 

3 Select the Multicast Cipher Mode, which determines the method by which 
keys are computed. 
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TKIP — (Temporal Key Integrity Protocol) provides per-packet key mixing, a 
message integrity check and a re-keying mechanism 

WEP — Provides standard WEP ciphering 

4 Select the type of WPA Key Management: 
WPA authentication over 802. 1x 

WPA Pre-shared Key (PSK) 

5 Select the Key Type: 

Hexadecimal (0-9, A~F; for example, D7 OA 9C 7F E5) 
Alphanumeric (0-9, A~F; for example 01234) 

6 Enter the pre-shared key in the space provided. 

WEP Configuration 

WEP encryption is based on the use of security keys and the popular RC4 
encryption algorithm. 

At least one transmit key must be defined in the WEP Configuration. Wireless 
devices without a valid WEP key will be excluded from network traffic. 

The key selected as the transmit key index is used by the access point for all 
transmissions. Other keys defined can be used by the access point for decrypting 
station communications. When enabling 802. 1x security with dynamic session 
keys, key index 4 is reserved for the 802. 1x client session key. Therefore, when 
802. 1x clients are in the network, the access point should not be configured to 
use key index 4 as the transmit key index. 

To configure WEP encryption: 

1 Under Encryption, select Enable. 

2 Under WEP Configuration, select the Key Size. 

The access point supports shared key encryption with key lengths of 64-bits, 
128-bits, or 152-bits. 

3 Select the Key Type. 

Hexadecimal (0-9, A-F; for example, D7 OA 9C 7F E5) 
Alphanumeric (0-9, A-F; for example 01234) 
3Com Passphrase (a string, described below) 

4 Enter the keys in their fields. 

64-bit — Each key contains 10 hexadecimal digits or 5 alphanumeric 
characters. 
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128-bit — Each key contains 26 hexadecimal digits or 13 alphanumeric 
characters. 

1 52-bit — Each key contains 32 hexadecimal digits or 1 6 alphanumeric 
characters. 

3Com Passphrase — This encryption string is for use only with other 3Com 
Wireless LAN devices. It is a case-sensitive string between 6 and 30 characters 
long. To enter the string, click 3Com Passphrase. Then type any combination 
of letters and numbers in the Key 1 field and click Apply. 

WPA Configuration for Windows XP 

The following table shows how to configure the access point to support the 
various authentication and encryption options available for Windows XP Wireless 
Zero Configuration. 

The following notes apply to configuring the access point for WPA under 
Windows XP: 

■ A WPA-capable wireless network interface card is required. 

■ The Windows XP Support Patch for Wireless Protected Access, which you can 
download from the Microsoft Web site, is required. 

■ To allow WEP clients, clear the WPA Configuration Required check box and 
enter an appropriate WEP key. 

■ For all WPA configurations, 802. 1x must be enabled on the 
Authentication page. 



Windows XP Wireless Zero 
Configuration 


Access Points 8200/8500/8700 


Authentication Encryption 


Authentication 


Encryption 


Other 


Open Disabled 


Open System 


Disable 




WEP 


Open System 


Enable 


Enter static keys under 
WEP Configuration 


Shared Disabled 


Not available 


WEP 


Shared Key 


Enable 


Enter static keys under 
WEP Configuration 
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Windows XP Wireless Zero 
Configuration 

Authentication Encryption 


Access Points 8200/8500/8700 
Authentication Encryption Other 


WPA AES 


Not available 


TKIP 


Open System Enable WPA Configuration: 

Required 

Multicast Cipher Mode: 
TKIP 

WPA Key Management: 
WPA 802. 1x 


WEP 


Open System Enable WPA Configuration: 

Required 

Multicast Cipher Mode: 
WEP 

WPA Key Management: 
WPA 802. 1x 


WPA-PSK AES 


Not available 


TKIP 


Open System Enable WPA Configuration: 

Required 

Multicast Cipher Mode: 
TKIP 

WPA Key Management: 
WPA-PSK 

Select Key Type and 
enter Pre-Shared Key 


WEP 


Open System Enable WPA Configuration: 

Required 

Multicast Cipher Mode: 
WEP 

WPA Key Management: 
WPA-PSK 

Select Key Type and 
enter Pre-Shared Key 
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Troubleshooting 



If you have difficulty with the 3Com Wireless LAN access point, first check the 
following items in the configuration: 

■ Radio Settings page: Ensure that the SSID is the same on clients and the 
access point. 

■ Security page: Ensure that Encryption is the same on clients and the 
access point. 

■ Authentication page: Ensure that the Local MAC Authentication System 
Default is set to Allow. Ensure that 802. 1 x Authentication Settings are correct. 

■ TCP/IP Settings page: If the DHCP Client is set to Disabled, then ensure that 
the access point IP Address is within the same subnet as the wired LAN. 

If necessary, reset the access point to the factory defaults. 

Try the solutions in the following table. If you need further assistance, contact 
3Com Technical Support through the following Web page: 
http://csoweb4.3com.com/contactus/ 



Symptom Solutions 

Access point does not Make sure the Ethernet cable is plugged into the port 

power up. labeled To Access Point on the power brick. 

Check for a faulty access point power supply. 

Check for a failed AC power supply 

Make sure that the Ethernet cable is plugged into the port 
labeled To Hub/Switch on the power brick. 

Verify the network wiring and topology for proper 
configuration. Check that the cables used are the 
proper type. 



Access point powers up, but 
has no connection to the 
wired network. 
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Symptom 



Solutions 



No operation. Verify the access point configuration. 

Review access point firmware revisions and update 
firmware if necessary. 

Make sure that there are no duplicate IP addresses on the 
network. Unplug the access point and ping the assigned 
address to make sure that no other device responds to 
that address. 

Confirm that the service area on the access point matches 
that on the clients. 

Verify that the clients are operating correctly. 

Make sure that security settings on the access point match 
those on the clients. 

Make sure that the access point antennas are positioned 
properly. 

Check the range and move clients closer if necessary. 

Mobile users do not have Make sure that all access points and wireless devices in 
roaming access to the access the ESS in which mobile users can roam are configured to 
point. the same WEP setting, SSID, and authentication settings. 

Slow or erratic performance. Try changing the wireless channel on the access point. 

Check the access point antennas, connectors, and cabling 
for loose connections. 

Check the wired network topology and configuration 
for malfunctions. 



Access point powers up, but 
does not associate with 
wireless clients. 



Running on a computer 
connected to the wired LAN, 
the 3Com Device Manager 
cannot find an access point. 



The 3Com Device Manager cannot discover devices across 
routers. Make sure that the computer is connected on the 
same segment as the access point. 



After you specify an IP 
address for an access point, 
the 3Com Device Manager 
continues to point to the old 
IP address when you select 
the access point in the 
Wireless Network Tree. 



In the 3Com Device Manager window click the Refresh 
button to refresh the Wireless Network Tree. Then click 
the access point in the Wireless Network Tree and click 
Properties. The IP address you specified is now listed. If 
you want to continue configuring the access point, 
click Configure. 
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Symptom 



Solutions 



While you are configuring the 
access point, the 
Configuration Management 
System stops responding. 



To maintain wireless association, the service area and the 
security settings on the client and the access point must 
match exactly. Therefore, if you are associated with the 
access point that you are configuring and you change the 
access point service area or security, make sure to change 
the client service area to match. 

If you change the IP address and save the change, you 
cannot continue to configure the access point using the 
old IP address. Therefore, if you want to continue 
configuring this access point after you save this change, 
you must do the following: 

1 Close your browser. 

2 Return to the 3Com Device Manager Wireless Network 
Tree and click Refresh. 

3 Select the access point and click Configure to start a 
new configuration session. 



The access point cannot be 
configured using the Web 
browser. 



Reset the access point (push the reset button located near 
the access point LEDs). 



After you enable the Secure 
Web Server Connection, the 
access point resets. When 
you launch the configuration 
from the 3Com Device 
Manager, the browser cannot 
find the configuration 
web pages. 



When the Secure Web Server Connection is On, you must 
specify "https://" in the browser address pane to launch 
the configuration. 
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A Technical Support 



3Com provides easy access to technical support information through a 
variety of services. This appendix describes these services. 

Information contained in this appendix is correct at time of publication. For the 
most recent information, access the 3Com Corporation World Wide Web site at 
http://www.3com.com/. 

Online Technical Services 

3Com offers worldwide product support 24 hours a day, 7 days a week, through 
the following online systems: 



World Wide Web Site 



3Com Knowledgebase 
Web Services 



To access the latest networking information on the 3Com Corporation World 
Wide Web site enter this URL into your Internet browser: 

http://www.3com.com/ 

This service provides access to online support information such as technical 
documentation and software library, and support options that range from 
technical education to maintenance and professional services. 

This interactive tool contains technical product information compiled by 3Com 
expert technical engineers around the globe. Located on the World Wide Web 
at http://knowledgebase.3com.com, this service gives all 3Com customers and 
partners complimentary, round-the-clock access to technical information on 
most 3Com products. 



Support from Your Network Supplier 

If you require additional assistance, contact your network supplier. Many suppliers 
are authorized 3Com service partners who are qualified to provide a variety of 
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services, including network planning, installation, hardware maintenance, 
application training, and support services. 

When you contact your network supplier for assistance, have the following 
information ready: 

■ Product model name, part number, and serial number 

■ A list of system hardware and software, including revision levels 

■ Diagnostic error messages 

■ Details about recent configuration changes, if applicable 

If you are unable to contact your network supplier, see the following section on 
how to contact 3Com. 



If you are unable to obtain assistance from the 3Com online technical resources 
or from your network supplier, 3Com offers technical telephone support services. 
To find out more about your support options, call the 3Com technical telephone 
support phone number at the location nearest you. 

When you contact 3Com for assistance, have the following information ready: 

■ Product model name, part number, and serial number 

■ A list of system hardware and software, including revision levels 

■ Diagnostic error messages 

■ Details about recent configuration changes, if applicable 

The following list of worldwide technical telephone support number is correct at 
the time of publication. Refer to the 3Com Web site for updated information. 



Support from 3Com 



Country 



Telephone Number 



Asia, Pacific Rim 

Australia 
Hong Kong 
India 



800 933 486 



+61 2 9424 51 79 or 000800 650 1 1 1 1 



1 800 678 515 



Indonesia 



001 803 61009 



Japan 
Malaysia 
New Zealand 



0800 446 398 



00531 616 439 or 03 5977 7991 



1800 801 777 



Pakistan 



+61 2 9937 5083 
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Country 


Telephone Number 


Philippines 


1235 61 266 2602 or +61 2 9937 5076 


P.R. ot China 


1 0800 61 001 37 or 021 6350 1 590 or 00800 0638 3266 


Singapore 


800 6161 463 


S. Korea 


00798 61 1 2230 or 02 3455 6455 


Taiwan, R.O.C. 


00801 611 261 


Thailand 


001 800 611 2000 


Or, send a description of the problem by email to: apr_technical_support@3com.com 


Europe, Middle East and Africa 




From anywhere in these regions: 


http://emea.3com.com/support/supportnumbers.html 


Latin America 




From Brazil, Mexico, Puerto Rico, Central 




America, and South America 


http://www.3com.com/support/en_US/repair/lat.html 


North America 




United States and Canada 


1 800 876 3266 


Returning Products for Repair 


Before you send a product directly to 3Com for repair, you must first obtain an 


authorization number. Products sent to 3Com without authorization numbers will 


be returned to the sender unopened, at the sender's expense. To obtain an 


authorization number, call or fax: 


Country 


Contact Information 


Asia, Pacific Rim 


+ 65 543 6500 Phone + 65 543 6348 Fax 


Europe, South Africa, and Middle East 


http://emea.3com.com/gls 




For e-mail support: 




http://emea.3com.com/support/email.html 


Central and South America, Argentina, 




Bolivia, and Brazil 


http://www.3com.com/support/en_US/repair/lat.html 


Caribbean 


525 201 0004 


Chile 


562 240 6200 


Colombia 


525 201 0004 


Ecuador 


http://www.3com.com/support/en_US/repair/lat.html 


Mexico 


http://www.3com.com/support/en_US/repair/lat.html 
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Country Contact Information 



Paraguay 525 201 0004 

Peru 511 241 1691 

Uruguay 525 201 0004 

Venezuela 525 201 0004 

From the following countries, you may call the toll-free numbers; select option 2 and then option 2: 
U.S.A. and Canada 1 800 876 3266 
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Regulatory Compliance Information 



3Com Wireless LAN Access Points 8200/8500/8700 
FCC Radio-Frequency Exposure Notice 

This device generates and radiates radio-frequency energy. In order to comply with FCC radio-frequency radiation 
exposure guidelines for an uncontrolled environment, this equipment has to be installed and operated while maintaining a 
minimum body to antenna distance of 1 meter. 

This product does not contain any user serviceable components. Any unauthorized product changes or modifications will 
invalidate 3Com's warranty and all applicable regulatory certifications and approvals. This product must be installed by a 
professional technician/installer. 

FCC Part 15 Notice (Applicable to Use Within the USA) 

802.11a radio only: This product is for indoor use only when using channels 36, 40, 44, or 48 (51 50-5250 MHz). 

This device complies with part 1 5 of the FCC Rules. Operation is subject to the following two conditions: (1) This device 
may not cause harmful interference, and (2) this device must accept any interference received, including interference that 
may cause undesired operation. 

WARNING: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to 
Part 1 5 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a 
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and 
used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no 
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to 
radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try 
to correct the interference by one or more of the following measures: 

■ Reorient or relocate the receiving antenna. 

■ Increase the separation between the equipment and receiver. 

■ Connect the equipment into an outlet on a circuit different from the one which the receiver is connected to. 

■ Consult the dealer or an experienced radio/TV technician for help. 

The user may find the following booklet prepared by the Federal Communications Commission helpful: 
The Interference Handbook 

This booklet is available from the U.S. Government Printing Office, Washington, D.C. 20402. Stock No. 004-000-00345-4. 

Manufacturer's Declaration of Conformity 

3Com Corporation 

5500 Great America Parkway 
P.O. Box 58145 
Santa Clara, CA 95054-8145 
(408) 326-5000 

Declares that the product: 

Date: 28 February 2003 

Brand Name: 3Com Corporation 

Model Number: WL-450 

Equipment Type: Wireless LAN Access Point 

Complies with Part 1 5 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause 
harmful interference, and (2) this device must accept any interference received, including interference that may cause 
undesired operation. 



3Com Corporation WL-450 



Tested to Comply 
with FCC Standards 

FOR HOME OR OFFICE USE 




Industry Canada Notice (Applicable to Use Within Canada) 

This device complies with Canadian RSS-21 0. 

To prevent radio interference to the licensed service, this device is intended to be operated indoors and away from 
windows to provide maximum shielding. Equipment (or its transmit antenna) that is installed outdoors is subject to 
licensing. 

The installer of this radio equipment must ensure that the antenna is located or pointed such that it does not emit RF field 
in excess of Health Canada limits for the general population; consult Safety Code 6, obtainable from Health Canada's web 
site www.hc-sc.gc.ca/rpb. 

Avis de Conformite a la Reglementation d'lndustrie Canada 

Pour empecher toute interference aux services faisant I'objet d'une licence, cet appareil doit etre utilise a I'interieur 
seulement et devrait etre place loin des fenetres afin de fournir un ecran de blindage maximal. 

L'installateur du present materiel radio doit s'assurer que I'antenne est situee ou pointee de maniere a ce que cette 
derniere n'emette pas de champs radioelectriques superieurs aux limites specifees par Sante Canada pour le grand public; 
consulter le Code de securite 6, disponible sur le site Web de Sante Canada, a I'adresse suivante: www.hc-sc.gc.ca/rpb. 

Industry Canada (IC) Emissions Compliance Statement 

This Class B digital apparatus complies with Canadian ICES-003. 

Avis de Conformite a la Reglementation d'lndustrie Canada 

Cet appareil numerique de la classe B est conform a la norme NMB-003 du Canada. 

European Community — CE Notice (802.11a Radio) 

Marking by the symbol: 



C€0560® 



indicates compliance with the essential requirements of Directive 73/23/EC and the essential requirements of articles 
3.1 (b), 3.2 and 3.3 of Directive 1999/5/EC. Such marking is indicative that this equipment meets or exceeds the following 
technical standards: 

■ EN 301 893 — Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized EN covering 
essential requirements of article 3.2 of the R&TTE Directive. 

■ EN 301 489-17 — Electromagnetic compatibility and Radio Spectrum Matters (ERM); Electromagnetic Compatibility 
(EMC) standard for radio equipment and services; Part 17: Specific conditions for 2.4 GHz wideband transmission 
systems and 5 GHz high performance RLAN equipment. 

■ EN 60950 — Safety of information technology equipment, including electrical business equipment. 
Marking by the symbol: 



© 



indicates that usage restrictions apply. 

■ This product is for indoor use only when using channels 36, 40, 44, 48, 52, 56, 60, or 64 (51 50-5350 MHz). 

■ This product cannot be used in Austria, Greece, Ireland, and Spain. 

■ This product can be used as shown in the table below: 

Countries: Allowable Frequencies of Operation: 

Austria, Liechtenstein, and Switzerland. 51 50-5250 MHz only 

(Channels 36, 40, 44, and 48). 

France and Ireland. 51 50-5350 MHz only 

(Channels 36, 40, 44, 48, 52, 56, 60, and 64). 

Belgium, Denmark, Finland, Germany, Iceland, Italy, 51 50-5350 MHz and 5470-5725 MHz 

Luxembourg, The Netherlands, Norway, Portugal, Sweden, (Channels 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 1C 

The United Kingdom. 1 12, 1 16, 120, 124, 128, 132, 136, and 140). 

Greece and Spain. No 5 GHz operation allowed at this time. 



European Community — CE Notice (802.11b Radio) 

Marking by the symbol: 

C€® 

indicates compliance with the essential requirements of Directive 73/23/EC and the essential requirements of articles 
3.1 (b), 3.2 and 3.3 of Directive 1999/5/EC. Such marking is indicative that this equipment meets or exceeds the following 
technical standards: 

■ EN 300 328-2 — Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband Transmission systems; 
data transmission equipment operating in the 2,4 GHz ISM band and using spread spectrum modulation techniques 

■ EN 301 489-17 — Electromagnetic compatibility and Radio Spectrum Matters (ERM); Electromagnetic Compatibility 
(EMC) standard for radio equipment and services; Part 17: Specific conditions for 2.4 GHz wideband transmission 
systems and 5 GHz high performance RLAN equipment. 

■ EN 60950 — Safety of information technology equipment, including electrical business equipment. 
Marking by the symbol: 

® 

indicates that usage restrictions apply. 

In France, this product must be configured to operate on a legal channel. Channels 10-13 are allowed. Consult user 
documentation for information on how to configure this product. 

Additional Country Restrictions (802.11b Radio) 

■ In Israel, this product must be configured to operate on a legal channel. Channels 5-7 are allowed. 

■ In Jordan, this product must be configured to operate on a legal channel. Channels 10-13 are allowed. 
Consult user documentation for information on how to configure this product. 

Safety Compliance Notice 

This device has been tested and certified according to the following safety standards and is intended for use only in 
Information Technology Equipment which has been tested and certified to these or other equivalent standards: 

■ UL Standard 60950, 3rd Edition / CSA C22.2 No. 60950-00 

■ IEC 60950 

■ EN 60950 

Published May, 2003 
User Guide Version 2.1 .3 
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